Data Subject Rights are fundamental rights granted to individuals under GDPR (Articles 12-22) regarding their personal data. These include the right to access, rectification, erasure (right to be forgotten), restrict processing, data portability, and object to processing.
Organizations must provide mechanisms for data subjects to exercise these rights and respond to requests within 30 days. These rights empower individuals with control over their personal information and create accountability for organizations handling personal data.